Skip to content

Instantly share code, notes, and snippets.

View Holo-Krzysztof's full-sized avatar

Krzysztof Lesiak Holo-Krzysztof

View GitHub Profile
All ETW providers exposed via Device Portal, version 19041.1124.arm64fre.vb_release_svc_sydney_rel_prod.201007-1118
47bfa2b7-bd54-4fac-b70b-29021084ca8f -> Application Popup
199fe037-2b82-40a9-82ac-e1d46c792b99 -> LsaSrv
b6cc0d55-9ecc-49a8-b929-2b9022426f2a -> Microsoft-Client-Licensing-Platform
bc1bdb57-71a2-581a-147b-e0b49474a2d4 -> Microsoft-Gaming-Services
9e3b3947-ca5d-4614-91a2-7b624e0e7244 -> Microsoft-IE
7f8e35ca-68e8-41b9-86fe-d6adc5b327e7 -> Microsoft-IE-JSDumpHeap
57277741-3638-4a4b-bdba-0ac6e45da56c -> Microsoft-JScript
ffdb9886-80f3-4540-aa8b-b85192217ddf -> Microsoft-PerfTrack-MSHTML
@Holo-Krzysztof
Holo-Krzysztof / NiftyETWProviders.json
Created December 4, 2019 14:37 — forked from mattifestation/NiftyETWProviders.json
ETW providers you never knew existed...
[
{
"ProviderGUID": "72d164bf-fd64-4b2b-87a0-62dbcec9ae2a",
"ProviderName": "AccEventTool",
"ProviderGroupGUID": "4f50731a-89cf-4782-b3e0-dce8c90476ba",
"AssociatedFilenames": [
"accevent.exe",
"inspect.exe",
"narrator.exe",
"srh.dll"